Integrated: 8270290: NTLM authentication fails if HEAD request is used

Alex Kasko akasko at openjdk.java.net
Thu Sep 30 15:25:02 UTC 2021


On Mon, 12 Jul 2021 10:34:54 GMT, Alex Kasko <akasko at openjdk.org> wrote:

> When HEAD request is used with a proxy (or a server) that requires NTLM, authentication fails when server returns large (8kb+) body along with NTLMSSP_CHALLENGE response.
> 
> Proposed fix is to check for ongoing NTLM auth in `reset()` and consume the response body in this case.
> 
> Alternatively the whole check for `HEAD` method in `reset()` can be dropped.

This pull request has now been integrated.

Changeset: 3e0d7c33
Author:    Alex Kasko <akasko at openjdk.org>
Committer: Severin Gehwolf <sgehwolf at openjdk.org>
URL:       https://git.openjdk.java.net/jdk/commit/3e0d7c33d41a93496bfa6a47d1508e415930adf9
Stats:     307 lines in 2 files changed: 306 ins; 0 del; 1 mod

8270290: NTLM authentication fails if HEAD request is used

Reviewed-by: dfuchs, michaelm

-------------

PR: https://git.openjdk.java.net/jdk/pull/4753


More information about the net-dev mailing list